CloudBees action: Scan Go code with Gosec

Use this action to perform static application security testing (SAST) on Go repositories with the open-source Golang Security Checker (Gosec). Gosec inspects Go code for security problems by scanning the AST and SSA code representation.

Supported language

Gosec is only used to scan Go (LANGUAGE_GO) repositories.

Usage example

In your YAML file, add:

      - name: Scan with Gosec
        uses: cloudbees-io/gosec-sast-scan-code@v1

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.